EUVD-2022-31357

Malicious code in bioql PyPI...

EUVD-2025-1557

Malicious code in bioql PyPI...

EUVD-2025-23491

Malicious code in bioql PyPI...

EUVD-2023-12740

Malicious code in bioql PyPI...

EUVD-2025-26058

Malicious code in bioql PyPI...

EUVD-2024-34584

Malicious code in bioql PyPI...

EUVD-2025-32311

Cursor is a code editor built for programming with AI. In versions 1.7 and below, automatic loading of project-specific CLI configuration from the current working directory /.cursor/cli.json could override certain global configurations in Cursor CLI. This allowed users running the CLI inside a...

Arbitrary Code Injection

electron is vulnerable to Arbitrary Code Injection. The vulnerability is due to modification of the resources folder when the embeddedAsarIntegrityValidation and onlyLoadAppFromAsar fuses are enabled, because these fuses fail to fully protect ASAR integrity on writable filesystems; an attacker wi...

CVE-2025-56807

A Stored Cross-Site Scripting (XSS) vulnerability exists in FairSketch RISE Ultimate Project Manager & CRM version 3.9.4 within the File Manager functionality. The flaw is caused by insufficient input sanitization of the title parameter when creating new folders in the admin dashboard. An attacke...

CVE-2025-10541

iMonitor EAM version 9.6394 is vulnerable to local privilege escalation due to an insecure update mechanism in the eamusbsrv64.exe system service, which runs with NT AUTHORITYSYSTEM privileges. The service automatically loads files from the *C:\sysupdate* directory during startup. Because any lo...

SingleStore: Delete any folder for any user within the organization

A vulnerability in the SingleStore backend API allowed low-privileged users to delete folders belonging to other users within the same organization by manipulating the folderid parameter in DELETE requests. The vulnerability was rated CVSS 3.0 Low 3.8 due to high attack complexity requiring...

CVE-2025-53947

A local attacker with low privileges on the Windows system where the software is installed can exploit this vulnerability to corrupt sensitive data. A data folder is created with very weak privileges, allowing any user logged into the Windows system to modify its content...

CVE-2025-53947

CVE-2025-53947 affects Cognex In-Sight Explorer and Cognex In-Sight Camera Firmware. The root cause is incorrect default/weak permissions on a data folder, enabling a local attacker with low privileges to modify its content and corrupt sensitive data. The vulnerability is local and requires minim...

CVE-2025-53947 Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Default Permissions

A local attacker with low privileges on the Windows system where the software is installed can exploit this vulnerability to corrupt sensitive data. A data folder is created with very weak privileges, allowing any user logged into the Windows system to modify its content...

CVE-2025-53947 Cognex In-Sight Explorer and In-Sight Camera Firmware Incorrect Default Permissions

A local attacker with low privileges on the Windows system where the software is installed can exploit this vulnerability to corrupt sensitive data. A data folder is created with very weak privileges, allowing any user logged into the Windows system to modify its content...

CVE-2025-57625

CYRISMA Sensor before 444 for Windows has an Insecure Folder and File Permissions vulnerability. A low-privileged user can abuse these issues to escalate privileges and execute arbitrary code in the context of NT AUTHORITY\SYSTEM by replacing DataSpotliteAgent.exe or any other binaries called by...

PT-2025-38485

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A local attacker with low privileges on the Windows system where the software is installed can corrupt sensitive data. A data folder is created with weak privileges, allowing any user logged...

Cognex In-Sight Explorer和Cognex In-Sight Camera Firmware 安全漏洞

Cognex In-Sight Explorer and Cognex In-Sight Camera Firmware are both products of Cognex Corporation, U.S.A. Cognex In-Sight Explorer is a tool that has the ability to debug and program the software of its line of smart cameras.Cognex In-Sight Camera Firmware is the firmware for a range of smart...

CVE-2025-57625: Incorrect Default Permissions

CYRISMA Sensor before 444 for Windows has an Insecure Folder and File Permissions vulnerability. A low-privileged user can abuse these issues to escalate privileges and execute arbitrary code in the context of NT AUTHORITY\SYSTEM by replacing DataSpotliteAgent.exe or any other binaries called by...

ExploitOnCLI

This is an offensive tool for searching exploits in multiple databases. The tool, named ExploitOnCLI or EOC, is written in PHP for Linux and allows users to search for exploits in various databases, including Exploit-DB, PacketStormSecurity, IEDB, Siph0n, CXSecurity, and Exploit4Arab. The tool ca...